Skip to content
v2.275.0

ParseToOCSFProperty Struct ​

Processor to parse events from CloudTrail, Route53Resolver, VPCFlow, EKSAudit and AWSWAF into OCSF V1.1 format.

Example ​

ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_logs as logs } from 'aws-cdk-lib';
const parseToOCSFProperty: logs.ParseToOCSFProperty = {
  eventSource: logs.OCSFSourceType.CLOUD_TRAIL,
  ocsfVersion: logs.OCSFVersion.V1_1,

  // the properties below are optional
  source: 'source',
};

Properties ​

eventSourceOCSFSourceTypeevent_sourceOCSFSourceTypeeventSourceOCSFSourceTypeEventSourceOCSFSourceTypeEventSourceOCSFSourceTyperequired#
Type of input log event source to convert to OCSF format.
ocsfVersionOCSFVersionocsf_versionOCSFVersionocsfVersionOCSFVersionOcsfVersionOCSFVersionOcsfVersionOCSFVersionrequired#
Version of OCSF schema to convert to.
sourceoptionalstringsourceoptionalstrsourceoptionalStringSourceoptionalstringSourceoptional*string= '@message'#
Path to the field in the log event that will be parsed.

Use dot notation to access child fields.